Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft
File:                     QQSkCCHEF2zELiVe9sFydHPD8Ao.mft (raw, json)
Hash identifier:          chk5Kxt2Z69Q+fY61uFOTpLzVfqvggDGz+MZVoE8x3o=
Subject key identifier:   C8:81:6F:FA:08:71:09:26:A0:B9:5C:72:81:2F:81:AE:17:9C:2A:F2
Authority key identifier: 41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
Certificate issuer:       /CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Certificate serial:       019F19B17A4604EBE69473CB9281E17F4064
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft
Manifest number:          19A4
Signing time:             Tue 30 Jun 2026 18:01:29 +0000
Manifest this update:     Tue 30 Jun 2026 18:01:29 +0000
Manifest next update:     Wed 01 Jul 2026 18:01:29 +0000
Files and hashes:         1: 1-fuWQ0J7N3Mc1-LpV47OkEYJ6Pg.roa (hash: d64kZTOMQS3ywmOiCwM9goS+Zs55OgLIp48OWiE2tqI=)
                          2: 3qCviuOG-ueF_1VEjm9A7m4dsIk.roa (hash: sAL6XW3hWoRAGWp0+zVbTSYYIBh9Tr5DdziSNbosFMc=)
                          3: 4iREikE0FlzD4Lki3jJx6aaj7Ek.roa (hash: R85Lc2X5cjTiidE1qCVwRr469wMVOizgeXCdlpP24Do=)
                          4: 7F404ndf6WlAawVxH8uEqbUfNqg.roa (hash: 0vRuwJ86hGL2rgS3c27BsrNGgAqpwI3nuvZOYvEC2o8=)
                          5: 891fnCNTe0IKQYnO-ZqvxNgk-7k.roa (hash: VPRQl1y1jooeZjbup+JMP7DkoiYT1QAj+vISvPCzQ5U=)
                          6: Amhr13WKOrupDvbNhR-H8uA8vnQ.roa (hash: DunPwzqrWTpngKU5F7a27cbOD9P4pJ+IEPvx/MUiLIg=)
                          7: CBtEHJaHzVeN2D-IZE6BCv7mSC8.roa (hash: heEBAu3l6Z4RAGafbljD+NgYk3gtGcKPKxmuj7zaY7U=)
                          8: CRbc03vb_t7S-8OrjziURXlLPLs.roa (hash: AwT4/FD/dxBwMmMETo+hpYLUml8m4wGXejb2vnR3jvE=)
                          9: DmNgBVzwALAZpD0xt4gW0SabWP4.roa (hash: +HcyssYq+nPIZImlmBkQlaLU/HQWdmQa3/3LFcnfluc=)
                          10: Dq47WCi1_R3R9nKkOKnsCn37r54.roa (hash: 5JD7iNqs4qn/sy+bgp/hKnEbHR2EBc8c01xHZGOpYMA=)
                          11: EiEKEI95auMCB7NfQVwo9byU814.roa (hash: qJa+m44cB1n22XnwN3TBLrmdvt3RH9NDFwUuAESZSTE=)
                          12: JKDe6ScGUf5knBKSEZ3INxcpX_k.roa (hash: cP1FQRZP0bYy6TqBtYSmhv38p8stWSoSv7D1CesDGKo=)
                          13: N-ugS43QXCOLtMQg4hBDzZHSfs4.roa (hash: H5adi4ikfxvo36OYV+mOyefgvVd4tLYXrjrnT87kOLI=)
                          14: O3ilaHX6VJtoUZBeu1-BglPYb-I.roa (hash: PoRHXYKRSqCrsj4FltoRS6V1gs+nJ0Qsq87ffUhtPkI=)
                          15: PAfqhrbdkl_yRiUylPK1xIqq4lg.roa (hash: MoYNDn1wuFUbbeUFbkvj5yCW8TfAg9g5sltO0zCqY1Y=)
                          16: QQSkCCHEF2zELiVe9sFydHPD8Ao.crl (hash: V36EEtDH6gTQj+OqW89O06O3gaEZaLJGovIv7NTs5lw=)
                          17: U7Tc0OMn99OVh4UaH8Gir63iiJs.roa (hash: VeiRvPbD+gYEQvLB86zuV+IwSFIqcHPYDQqYvNeKjps=)
                          18: Vr8UKQBR2K4aBwszRxtTMGpM3RU.roa (hash: pBwjHOXlk8Xh2v3/m1xk7uIqqtM9MysBJJTXP9nTkqk=)
                          19: aw7187ZOI0MpqazuRWsrcYgwwpQ.roa (hash: NIDCNaG3ouNUdnwxeJaCcGty477WEOLvnr2djhhc/90=)
                          20: cWtnPd8ZvgFa7GRaqMfs10BE4qc.roa (hash: jN/lGIzUOKHwZH6DyNIy+6o9b1TpGieuOJIXydb73lg=)
                          21: c_XVhcUysLwXAHApwazs-UkQkmQ.roa (hash: yDd1bLRr1tOEIQ6ft+0WAm2AEOFTsdq7bRYUYaVYKNA=)
                          22: hkSLq2UREFy1118xumuIZnvQ67Y.roa (hash: SOh35WJM4tvkJo/U2D6+8WiI7UsWl69I9bV1omMOiek=)
                          23: kqgMt21-DFLMw82FOeig-EaUgf0.roa (hash: IMAdg24Zv5aLWg8Ll0N/xPxQR4lu+BjbaXj/E4I85pM=)
                          24: n3D-Zk4G38G2tBgyUy3hXStCuWg.roa (hash: xWuIVNN480cZZue76BwJppWLzoJjQqcpD9fuq0+OWZ0=)
                          25: q1B4D6fhb1hsDMHl4DgqMg1LBS0.roa (hash: QyvrcsEDHcRC23C4LJneKzaSVc+UGnP9rW3V3L3o3QM=)
                          26: qtg18Q1n5Jfx1gK-KfQtl08To-k.roa (hash: oG53ITscWjNRdxBTzyirX6KiMhTU+HEToywwA4a+H6Q=)
                          27: rPUe_mYrLSmTmFv2LQZ8OTHJG9k.roa (hash: 5iRsBFsd3e5QtYFbDWJgyq4JRArcPXehU90Piw8H6Eo=)
                          28: sJ1sC2Tf4OlwBqYXFNFoZRduFG8.roa (hash: Lhps7HR/EcrDbFr4rG5Dh/G7U6wPLWZb+NnuBmiPIWs=)
                          29: sJZVmKX-G_XNNEcca8MTXPH-dbc.roa (hash: DQKLyMn35LbEuueIciMk2w6CESjK2ZNYZ5n5ZL//wOw=)
                          30: tWMyn7tpor7zLv8S77uSSoVBOzY.roa (hash: 9VLMYOGfLfqrY2pS0fnmG2KOSYmzAO47mTzvU9rKrJk=)
                          31: vgFc0Uh_MgrlizJZvhlwuychk-E.roa (hash: GdhoQmVw/bO3KTSgyH6uYKhysKhPclMR0dWBbW/oMfg=)
                          32: yfk1E30luISg0XzXUtlJ2MNM9eM.roa (hash: WxN+8AXOM93AE57ePd+WfH578Dm9CftwqJPfTKxDhLE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:b1:7a:46:04:eb:e6:94:73:cb:92:81:e1:7f:40:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4104a40821c4176cc42e255ef6c1727473c3f00a
        Validity
            Not Before: Jun 30 18:01:29 2026 GMT
            Not After : Jul  1 18:01:29 2026 GMT
        Subject: CN=c8816ffa08710926a0b95c72812f81ae179c2af2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:fe:68:eb:c1:4c:c3:68:df:00:c3:3d:8f:09:
                    cf:83:53:4c:fc:f8:64:0f:23:25:73:9a:85:d0:15:
                    6d:93:30:7d:6e:aa:c6:ba:33:89:0c:59:e7:8d:ed:
                    da:54:f5:93:77:43:9e:20:84:4c:11:23:be:69:0c:
                    67:f5:0f:bf:00:51:2e:5b:5d:33:7a:05:01:45:01:
                    42:52:c5:38:37:54:b3:9c:d8:ab:a9:35:95:dd:c1:
                    92:4b:06:ef:ca:d9:cb:89:07:ee:9e:a0:27:13:10:
                    0c:79:be:5c:a8:ff:77:13:c3:a5:5d:46:a6:3b:72:
                    75:a5:f3:d2:c4:03:5f:2f:98:d2:90:d2:93:62:7b:
                    68:ec:d3:ce:a4:b8:7a:7b:29:6b:fc:21:9c:a3:0c:
                    df:63:c4:bd:06:2b:e3:6e:a7:15:ec:68:57:2e:10:
                    10:dc:3b:ec:d0:91:8c:1a:90:bb:4d:e0:40:61:8e:
                    55:3c:c1:d4:d0:ea:cc:e7:14:2e:57:43:87:40:bb:
                    3c:b0:10:41:a7:70:f3:49:33:75:a8:fc:a4:e0:87:
                    3f:e1:0c:20:6d:4a:45:a8:f0:9d:7a:73:33:7d:c8:
                    ac:62:4e:c8:81:a8:72:a0:38:e1:4f:23:b8:73:17:
                    e8:42:56:ba:4d:45:45:a0:22:c0:f8:be:b5:e9:62:
                    73:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:81:6F:FA:08:71:09:26:A0:B9:5C:72:81:2F:81:AE:17:9C:2A:F2
            X509v3 Authority Key Identifier:
                keyid:41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:aa:21:42:0f:f0:48:2a:3f:19:b8:c7:aa:12:a3:e4:14:32:
         58:e9:4c:7f:76:b6:ad:5d:7c:17:67:34:69:57:c5:39:77:59:
         f4:93:87:2e:47:ef:c2:c1:80:21:ec:12:03:e8:68:6e:b5:b5:
         40:1e:6b:2a:b9:35:6e:77:3d:89:34:fb:14:35:30:a1:74:12:
         e3:00:fb:19:db:a0:55:af:bc:99:cc:ad:42:b4:6a:35:fb:00:
         bc:bf:2b:bb:c8:66:93:41:b3:ae:36:92:db:46:bd:3e:c8:97:
         74:ca:c3:2b:bc:2f:b9:02:e5:9a:e2:53:18:72:0b:df:27:e2:
         02:5b:ff:33:58:49:45:48:dc:d1:b0:41:ad:da:be:e4:01:e9:
         22:d2:a3:17:27:eb:96:fd:20:7d:03:0f:ae:a2:56:8f:c6:2c:
         2e:53:c3:f2:77:db:c0:b2:6a:98:d9:54:b6:91:f2:84:04:fd:
         98:d0:b6:91:f4:0a:60:56:36:ac:eb:bc:dc:ca:f5:71:95:95:
         8a:a2:a5:dc:ec:6d:42:04:49:d0:fb:96:0e:4c:6a:a9:3c:6f:
         c2:64:2b:1e:29:38:36:2b:0c:ca:6b:31:97:a0:35:2a:3d:62:
         04:4c:24:b0:15:5c:33:08:40:37:c4:ac:d6:50:0a:91:bb:97:
         97:7e:45:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 23:17:52 2026 by rpki-client